CVE-2025-22621
CVSS 3.1 Score 6.4 of 10 (medium)
Details
Published Jan 7, 2025
Updated: Jan 15, 2025
CWE ID 269
Summary
CVE-2025-22621 is a vulnerability affecting versions 1.0.67 and below of the Splunk App for SOAR. The Splunk documentation erroneously suggested granting the `admin_all_objects` capability to the `splunk_app_soar` role. This mistake could result in inadequate access control for users lacking the "admin" roles in Splunk, potentially leading to unintended and unauthorized actions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.